Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68596 Malicious code in grim-yellow-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6516af53b000cd45d29855cf8bd69875a1d222ae586bb210f125389c0eb24f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-bronze-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67477320dd2c845859b97365f5cfeec24ed1a51d06462ef1d9540cb09b672790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-copper-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bd70b4884576b3e287097be1c952d84606ab3b0caaf866197b4385ba9eba47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute-amethyst-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88248a1b47a2412a421a35bdc44c80f6ee85d36bf38dc14f51c3b737f9d3a85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70684 Malicious code in small-magenta-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f5dc848ef34ab27ef85e731483b99788cab7f05272a33ac77ee0c33c1a9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66631 Malicious code in acute-coral-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94ff038c92cee08ecc4449683b44005c35352944afbd96d38351ee85bda4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67473 Malicious code in conventional-red-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814aa4f0dfc74d0fefe9c5ac4ebfe61e0fc891e5368bc14191c2017623391dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71109 Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69947 Malicious code in potential-salmon-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15fb4df96427aaa6fdbfd8268015800afae7244df6ccec2ae7dc55dd615235c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty-coffee-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a96d740a80e4ce8e80b4b77bddf107176b3de94ddec2c14ba359559605fcbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-coffee-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd5d5ebd8bedda2450ed83990ada971f06b2e4a8d099491b89093ed032a7d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500e28555e08d0863bd54b518c30dfebf4bcd17006a026a1109fa804335116d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67920 Malicious code in early-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f794fa3273d5f4b5c7b4674bd9c1b1d29765cbf4d380c4df2e10b73592d04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past-sapphire-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db19159f743e92941f4ade673f87684ea41cc0b81272779e6a256f1309f30bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70773 Malicious code in spiritual-lime-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c1a7bc12603a05eae6f51d99170667a8b6aea2a48bdc34820f60bc2e03f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67824 Malicious code in divine-orange-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade43c364fc69160f79d73c2377e60b65c076b3cb976cd1aa7d9760d5d23ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...